10 results · Clear filters · Feed
-
High 8.6
Zipline through 3.7.9 Invite Bypass via /api/auth/register Endpoint
Zipline through 3.7.9 contains an improper authorization vulnerability in the /api/auth/register endpoint, which enforces invite codes only when user registration is disabled, so registration succeeds without an invite when both invites and user registration …
-
High 8.3
Zipline versions from 3.4.5 before 3.7.10 contain a path traversal vulnerability in the user data export endpoint via t…
-
High 8.1
Zipline through 4.3.2 Path Traversal via x-zipline-filename Header
Zipline through 4.3.2 contains a path traversal vulnerability that allows authenticated uploaders to write files outside the upload directory by supplying traversal sequences in the x-zipline-filename header. Attackers using the local datasource can create or…
-
High 8.1CVE-2026-126937 Public exploit
Zipline before 4.6.5 TOCTOU Race Condition via /api/setup
Zipline before 4.6.5 contains a TOCTOU race condition in the POST /api/setup endpoint that allows unauthenticated attackers to create multiple SUPERADMIN accounts by racing concurrent requests before the firstSetup flag is reset. Attackers can send simultaneo…
-
High 7.1
Zipline before 4.6.4 Upload Quota Bypass via Forged Content-Range Headers
Zipline before 4.6.4 contains a resource allocation vulnerability that allows authenticated users to bypass chunked-upload size and quota checks by forging Content-Range offsets and totals. Attackers can send tiny chunks to the partial upload endpoint with la…
-
High 8.7
Zipline before 4.5.1 Stored XSS via HighlightCode Component
Zipline before 4.5.1 contains a stored cross-site scripting vulnerability in the HighlightCode component that renders unescaped file content before highlight.js finishes loading. Authenticated attackers can upload text files containing HTML/JavaScript payload…
-
High 8.8
Zipline before 4.5.0 IDOR via Folder PATCH and DELETE Endpoints
Zipline before 4.5.0 contains an insecure direct object reference vulnerability caused by missing ownership verification in the PATCH and DELETE handlers for /api/user/folders/:id. Authenticated attackers can supply another user's folder ID to rename it, make…
-
High 7.0
Zipline through 4.4.0 contains a path traversal vulnerability in the PATCH /api/user/files/:id rename endpoint that all…
-
High 7.0
Zipline through 4.4.0 contains a path traversal vulnerability that allows authenticated attackers to delete arbitrary s…
-
High 8.1
Zipline through 4.4.0 WebAuthn Authentication Bypass via Passkey Login
Zipline through 4.4.0 contains an authentication bypass vulnerability in the WebAuthn login endpoint that creates sessions for a supplied registered credential ID without verifying the assertion. Attackers who obtain a target's passkey credential ID can imper…